Browse Definitions :
Definition

hot mic (roving bug)

Contributor(s): Matthew Haughn

A hot mic, in a mobile security context, is a smartphone microphone that has been remotely activated  for surveillance purposes. The device is sometimes referred to as a “roving bug.”

 In 2014, whistleblower Edward Snowden revealed that government and intelligence community representatives could remotely activate a target smartphone’s microphone without causing any device behaviors that might alert the user. To do so, agency employees used a tool called “Nosey Smurf” from a collection of smartphone hacking and spyware tools known as the Smurf Suite. The software was introduced through a type of hidden and encrypted SMS message.  The malware toolkit includes other programs that enable precise device geolocation, eavesdropping and data access, along with the ability to avoid detection.

 The possibility of hot miking has been discussed for years. In a 2006 post, security expert Bruce Schneier speculated that it might be used for surveillance and that data gathered would likely considered  admissable for use in court. He also quoted a 2004 BBC article stating that smartphones were routinely used as “powerful, undetectable bugs” by intelligence communities. Due to imprecise wording of federal wiretapping law, data gathered not only from cellphone calls but also from conversations conducted near a cellphone may be admissible in court.

In general, a hot mic is just a microphone that’s turned on. The reference is usually to someone speaking nearby who is unaware that the mic is live. The term originates from broadcast media and live events in which a speaker has made inappropriate comments thinking that the microphone was turned off.

This was last updated in June 2016

Continue Reading About hot mic (roving bug)

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

  • risk management

    Risk management is the process of identifying, assessing and controlling threats to an organization's capital and earnings.

  • compliance framework

    A compliance framework is a structured set of guidelines that details an organization's processes for maintaining accordance with...

  • regulatory compliance

    Regulatory compliance is an organization's adherence to laws, regulations, guidelines and specifications relevant to its business...

SearchSecurity

  • DNS over HTTPS (DoH)

    DNS over HTTPS (DoH) is a relatively new protocol that encrypts domain name system traffic by passing DNS queries through a ...

  • integrated risk management (IRM)

    Integrated risk management (IRM) is an approach to risk management that uses a set of practices and processes to improve an ...

  • MITRE ATT&CK framework

    The MITRE ATT&CK (pronounced 'miter attack') framework is a free, globally accessible service that provides comprehensive and ...

SearchHealthIT

  • telemedicine (telehealth)

    Telemedicine is the remote delivery of healthcare services, such as health assessments or consultations, over the ...

  • Project Nightingale

    Project Nightingale is a controversial partnership between Google and Ascension, the second largest health system in the United ...

  • medical practice management (MPM) software

    Medical practice management (MPM) software is a collection of computerized services used by healthcare professionals and ...

SearchDisasterRecovery

SearchStorage

  • M.2 SSD

    An M.2 SSD is a solid-state drive (SSD) that conforms to a computer industry specification and is used in internally mounted ...

  • kilobyte (KB or Kbyte)

    A kilobyte (KB or Kbyte) is a unit of measurement for computer memory or data storage used by mathematics and computer science ...

  • virtual memory

    Virtual memory is a memory management capability of an operating system (OS) that uses hardware and software to allow a computer ...

Close